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Please amend the claims to read as indicated in the following list of 
claims: 

Claims 1-34. Cancelled. 

35. [Currently amended] A computing platform Apparatus 
comprising^. 

a secure key-handling unit arranged to store a 
storage root key that forms the root node of a tree- 
structured node hierarchy the non-leaf nodes of which, 
other than the root node, each comprise, in encrypted form, 
a key used to encrypt the or each of its child nodes, and 

insecure storage for storing the hierarchy nodes 

other than the root node ; 

the key-handling unit comprising: 

a memory for storing a current decryption-root key; 

a decrypted-access arrangement arranged to restrict 

decrypted access to the hierarchy nodes to those nodes 
decryptable by a chain of decryption rooted in said current 
decryption-root key; and 

a current-decryption-root setting arrangement for 

storing in said memory, in decrypted form, the key of a 
selected non-leaf node of said hierarchy to serve as said 
current decryption-root key, the current-decryption-root 
setting arrangement enabling the selected non-leaf node to 
be changed a koy ^ handling unit for handling a treo - 
structurod key hierarchy/ — the key - handling unit being 
arranged to treat a ooloctod node of tho hierarchy ao tho 
current root nodo such that thoso parts of the hierarchy 
that can only bo reached by ascont from tho current root 
nodo aro inaccessible/ — tho key-handling unit including an 



Response to Official Action 
Dated 7 February 2007 
Re: USSN 10/688,397 
Page 9 

arrangomcnt for changing the node of tho hierarchy Dorving 
as said current root node , 

36. [Currently amended] A computing platform Apparatuo 
according to claim 35, wherein the setting arrangement for 
changing the current root node is enabled to do so is 
arranged to permit the selected non-leaf node^ and thereby 
the decryption-root key, to be changed only upon a 
predetermined set of at least one condition being met. 

37 • [Currently amended] A computing platform Apparatus 
according to claim 36, wherein at least one predetermined 
condition comprises the receipt by the key handling unit of 
an authorisation authorization value indicative of 
particular digital data. 

38. [Currently amended] A computing platform Apparatus 
according to claim 37, wherein said authorisation 
authorization value is a digest of a protected process 
associated with the node that is intended to be the new 
selected non-leaf current root node. 

39. [Currently amended] A computing platform Apparatus 
according to claim 36, wherein at least one predetermined 
condition comprises that a protected process associated 
with the node that is intended to be the new selected non- 
leaf current root node is about to be run by the computing 
platform apparatus . 



40. [Currently amended] A computing platform Apparatus 
according to claim 39, wherein at least one predetermined 
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condition comprises that any other currently-activated 
processes running on the computing platform apparatus are 
benign. 

41. [Currently amended] A computing platform Apparatus 
according to claim 36, wherein at least one predetermined 
condition comprises that the key-handling apparatus is 
requested to change the selected non-leaf current root node 
by a root of trust of the computing platform apparatus . 

42. [Currently amended] A computing platform Apparatus 
according to claim 35, wherein upon start up of the 
computing platform, the node at the head of the hierarchy 

— judged without regard to v/hich node is the current root 
nod e, forms said selected non-leaf current root node upon 
start of tho apparatus . 

Claim 43. Cancelled. 

44. [Currently amended] A computing platform Apparatus 
according to claim 35, wherein the key-handling unit is 
arranged always to hold securely the node at the head of 
the hierarchy, a^s — judged without regard to which node is 
tho current root node, — internally in unencrypted form. 

Claim 45. Cancelled. 

46. [Currently amended] A computing platform Apparatus 
according to claim 35, wherein the key-handling unit is 
arranged to indicate the selected non-leaf current root 
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node by signing a value associated with the node using an 
identity key associated with the key-handling unit, 

47. [Currently amended] A computing platform Apparatuo 
according to claim 35, wherein the key-handling unit is so 
arranged that only a particular type of non-leaf 4^ey node, 
herein a dynamic key node, can be used as the selected non- 
leaf Gurront root node in addition to the node at the head 
of the hierarchy ao judged without regard to which node is 
the current root nodo . 

48. [Currently amended] A computing platform Apparatus 
according to claim 47, wherein the key-handling unit 
apparatus is arranged, upon receipt of a corresponding 
command, to generate a dynamic root key node as a node of 
said key hierarchy. 

49. [New] A computing platform according to claim 35, 
wherein the setting arrangement is arranged to permit the 
selected non-leaf node to be changed to one associated with 
a protected process upon receipt by the key-handling unit 
of a reliable indication that a mechanism expected to 
resist subversion will attempt to enforce appropriate 
access restrictions on that node and any descendent nodes, 
the key of the non-leaf node associated with said protected 
process being available for use in relation to the 
protected process upon becoming the decryption root key. 



